Admission first
File, page, geometry, image and estimated-memory limits are checked before worker execution.
Available tools process locally — your documents stay on your device
Private PDF Workflows
With Explicit Boundaries
Use nine governed browser-local workflows with visible limits, stable failures and no document upload.
Local processing boundary
Dedicated worker execution
No document retention
Nine Admitted Workflows
Every listed tool has an explicit browser-local boundary and tool-specific limits.
Merge PDFs
Combine local PDF files in a selected source-file order.
Split & Extract
Extract pages by range or split into individual files.
Optimize
Rebuild supported PDFs using object streams; savings vary by file.
Rotate
Rotate all pages deterministically by a selected angle.
Watermark
Apply a text watermark across every page.
Images to PDF
Combine local JPG and PNG images into a PDF.
Flatten Forms
Flatten supported interactive form fields into page content.
Page Numbers
Add numbered labels in one supported position.
How It Works
Three local steps. No account or document upload.
Step 1
Select
Choose local PDF or image files in the browser.
Step 2
Process
Select your tool and configure settings. Everything runs locally.
Step 3
Save
Use the native save picker or let your browser handle the fallback download.
Built in Governed Layers
AO-PDF exposes the operating boundary before a document is selected and keeps document-derived data out of telemetry.
Controlled execution
A dedicated worker is cancelled or terminated on demand, timeout, navigation and unmount.
Contained telemetry
Only admitted tool, outcome, capped duration and governed error code can enter custom events.
Process the Document, Not the Promise
Choose one of nine local workflows and review its limits before processing begins.
Get Started Free